August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1228601] AsmediaUSB4 1b21:2425 unreliable
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228601 https://bugzilla.suse.com/show_bug.cgi?id=1228601#c2 --- Comment #2 from Aaron Williams <aaron.w2(a)gmail.com> --- I am running into conflicts with filesystem and a few other components when I attempt to install the 6.10 kernel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228863] System asking for recovery key while booting a default mode encrypted Aeon system after automatic update
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228863 https://bugzilla.suse.com/show_bug.cgi?id=1228863#c9 --- Comment #9 from Artur Kaufmann <arturkaufmann(a)gmail.com> --- (In reply to Richard Brown from comment #8) > (In reply to Martin Abele from comment #7) > > Is it a chicken - egg problem? With ask-pin option the pin is not valid > > because the TPM was wiped and without the option, the system insists to > > provide the recovery pin... > > > > What command is used to enroll the TPM during the installation or during > > firstboot respectively? > > I think it’s more likely your claim that you’re resetting or clearing your > TPM is false/incorrect, or incomplete > > If you compare the logs from comments #4 and #6 you see evidence of > different event log entries which should be impossible if the system is > booting the same OS each time with a clear TPM > > Are you sure you’re clearing the TPM each time, and not booting into any > other OS? (Dell maintenance/recovery tools would count as a different OS) Indeed these are to different pieces of hardware. In my case (the dell), I've cleared the TPM in the UEFI only once and it is only aeon installed, no other OS and never booted something else than aeon. Before the last "transactional update dup" the default boot mode worked like a charm. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228876] Some Plasma 6 kirigami components aren't installed, preventing Plasma System Settings from loading many of its pages.
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228876 https://bugzilla.suse.com/show_bug.cgi?id=1228876#c4 Christophe Marin <christophe(a)krop.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://bugs.kde.org/show_b | |ug.cgi?id=488326 --- Comment #4 from Christophe Marin <christophe(a)krop.fr> --- (In reply to Alexander Sanderson from comment #3) > Okay, so after my computer being in sleep for a bit, the issue happened > again. Tried `QML_DISABLE_DISK_CACHE=1 systemsettings` and it fixed it. > > What's a more permanent fix, should this occur again? None yet, but you can remove ~/.cache/systemsettings/qmlcache when you get the issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228886] New: VUL-0: CVE-2024-28579: freeimage: buffer overflow in FreeImage_Unload() function when reading images in HDR format
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228886 Bug ID: 1228886 Summary: VUL-0: CVE-2024-28579: freeimage: buffer overflow in FreeImage_Unload() function when reading images in HDR format Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398672/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28579 https://bugzilla.redhat.com/show_bug.cgi?id=2271014 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28579 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228882] New: VUL-0: CVE-2024-28569: freeimage: buffer overflow in Imf_2_2:Xdr:read() when reading images in EXR format
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228882 Bug ID: 1228882 Summary: VUL-0: CVE-2024-28569: freeimage: buffer overflow in Imf_2_2:Xdr:read() when reading images in EXR format Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398666/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Imf_2_2::Xdr::read() function when reading images in EXR format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28569 https://bugzilla.redhat.com/show_bug.cgi?id=2270974 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28569 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228883] New: VUL-0: CVE-2024-28572: freeimage: buffer overflow in FreeImage_SetTagValue() function when reading images in JPEG format
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228883 Bug ID: 1228883 Summary: VUL-0: CVE-2024-28572: freeimage: buffer overflow in FreeImage_SetTagValue() function when reading images in JPEG format Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398663/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_SetTagValue() function when reading images in JPEG format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28572 https://bugzilla.redhat.com/show_bug.cgi?id=2270971 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28572 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228884] New: VUL-0: CVE-2024-28576: freeimage: buffer overflow in opj_j2k_tcp_destroy()
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228884 Bug ID: 1228884 Summary: VUL-0: CVE-2024-28576: freeimage: buffer overflow in opj_j2k_tcp_destroy() Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398655/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28576 https://bugzilla.redhat.com/show_bug.cgi?id=2270960 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28576 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228885] New: VUL-0: CVE-2024-28578: freeimage: buffer overflow in Load() function when reading images in RAS format
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228885 Bug ID: 1228885 Summary: VUL-0: CVE-2024-28578: freeimage: buffer overflow in Load() function when reading images in RAS format Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://smash.suse.de/issue/398671/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jengelh(a)inai.de Reporter: smash_bz(a)suse.de QA Contact: security-team(a)suse.de CC: stoyan.manolov(a)suse.com Target Milestone: --- Found By: Security Response Team Blocker: --- Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-28578 https://bugzilla.redhat.com/show_bug.cgi?id=2271011 https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909 https://www.cve.org/CVERecord?id=CVE-2024-28578 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1228784] New: 389-ds installation fails
by bugzilla_noreply＠suse.com 06 Aug '24

06 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228784 Bug ID: 1228784 Summary: 389-ds installation fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dmueller(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- /usr/sbin/groupadd -r dirsrv [ 20s] /usr/sbin/useradd -r -c User for 389 directory server -d /var/lib/dirsrv -g dirsrv -U dirsrv -s /sbin/nologin [ 20s] useradd: options -U and -g conflict [ 20s] Usage: useradd [options] LOGIN [ 20s] useradd -D [ 20s] useradd -D [options] [ 20s] Options: [ 20s] --badname do not check for bad names [ 20s] -b, --base-dir BASE_DIR base directory for the home directory of the [ 20s] new account [ 20s] --btrfs-subvolume-home use BTRFS subvolume for home directory [ 20s] -c, --comment COMMENT GECOS field of the new account [ 20s] -d, --home-dir HOME_DIR home directory of the new account [ 20s] -D, --defaults print or change default useradd configuration [ 20s] -e, --expiredate EXPIRE_DATE expiration date of the new account [ 20s] -f, --inactive INACTIVE password inactivity period of the new account [ 20s] -F, --add-subids-for-system add entries to sub[ud]id even when adding a system user [ 20s] -g, --gid GROUP name or ID of the primary group of the new [ 20s] account [ 20s] -G, --groups GROUPS list of supplementary groups of the new [ 20s] account [ 20s] -h, --help display this help message and exit [ 20s] -k, --skel SKEL_DIR use this alternative skeleton directory [ 20s] -K, --key KEY=VALUE override /etc/login.defs defaults [ 20s] -m, --create-home create the user's home directory [ 20s] -M, --no-create-home do not create the user's home directory [ 20s] -N, --no-user-group do not create a group with the same name as [ 20s] the user [ 20s] -o, --non-unique allow to create users with duplicate [ 20s] (non-unique) UID [ 20s] -p, --password PASSWORD encrypted password of the new account [ 20s] -r, --system create a system account [ 20s] -R, --root CHROOT_DIR directory to chroot into [ 20s] -P, --prefix PREFIX_DIR prefix directory where are located the /etc/* files [ 20s] -s, --shell SHELL login shell of the new account [ 20s] -u, --uid UID user ID of the new account [ 20s] -U, --user-group create a group with the same name as the user [ 20s] -Z, --selinux-user SEUSER use a specific SEUSER for the SELinux user mapping [ 20s] --selinux-range SERANGE use a specific MLS range for the SELinux user mapping [ 20s] error: %prein(389-ds-3.1.1~git0.aef1668-1.1.x86_64) scriptlet failed, exit status 1 [ 20s] error: 389-ds-3.1.1~git0.aef1668-1.1.x86_64: install failed [ 20s] error] [ 20s] Installation of 389-ds-3.1.1~git0.aef1668-1.1.x86_64 failed: [ 20s] Error: Subprocess failed. Error: RPM failed: Command exited with status 1. [ 20s] Abort, retry, ignore? [a/r/i] (a): a it shouldn't run "groupadd dirsrv" and then "useradd -U". useradd -U does the groupadd and the user creation in one go. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1226031] apparmor stops working due to "aa-logprof ERROR: Can't parse mount rule mount "" -> "/","
by bugzilla_noreply＠suse.com 05 Aug '24

05 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1226031 https://bugzilla.suse.com/show_bug.cgi?id=1226031#c19 David Disseldorp <ddiss(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(suse-beta@cboltz. | |de) --- Comment #19 from David Disseldorp <ddiss(a)suse.com> --- Hi Christian, (In reply to Christian Boltz from comment #18) > The reproducer from https://gitlab.com/apparmor/apparmor/-/issues/400 should > be minimal enough ;-) > > I just tested it on a 15.6 VM, and got (with the official kernel) > > # echo '/t { > > pivot_root "/tmp/" -> "/tmp/", > > }' | apparmor_parser -r > Warning from stdin (line 1): apparmor_parser: cannot use or update cache, > disable, or force-complain via stdin > apparmor_parser: Unable to replace "/t". Profile doesn't conform to protocol > > so the fix is indeed needed on 15.6. > > Unfortunately your test kernel does not fix the bug: > > # uname -a > Linux riesling3 6.4.0-150600.1.g6bf1f90-default #1 SMP PREEMPT_DYNAMIC Sun > Aug 4 18:19:32 UTC 2024 (6bf1f90) x86_64 x86_64 x86_64 GNU/Linux Thanks for testing and dumping your kernel version! Unfortunately it seems that the osc_wrapper script that I used to generate the build service project didn't correctly push the latest (aa-patched) source revision. Could you please retry with 6.4.0-150600.1.g10a598f-default from https://build.opensuse.org/repositories/home:ddiss:bsc1226031_aa_policy_unp… ? It should be published any minute now. Sorry for the mix-up. -- You are receiving this mail because: You are on the CC list for the bug.

1 0